i Preface During the past year, members of the Information Technology (IT) Government Coordinating Council (GCC) and the IT Sector Coordinating Council (SCC) collaborated to develop the 2010 IT Sector-Specific Plan (SSP). The IT SSP details the progress the IT Sector has made in its national-level risk management efforts, including the completion of the IT Sector Baseline Risk Assessment (ITSRA) in 2009, and discusses how it is using the results of that baseline analysis to inform the sector's critical infrastructure and key resources (CIKR) protective programs, research and development, and measurement activities.